CVE-2013-3527

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to 1 entry/signin or 2 entry/passwordrequest...

PT-2013-4457

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.18.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the name parameter in the Form/Email array to either the "entry/signin" or "entry/passwordrequest"...

CVE-2013-3527: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to 1 entry/signin or 2 entry/passwordrequest...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action...

CVE-2011-0526

Cross-site scripting XSS vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action...

PT-2011-2422

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.17 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a "/entry/signin" action. This could potentially lead to unauthoriz...

CVE-2011-0526: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action...